Personal data processing policy

This is a translation for convenience. The Russian version is legally binding.

This policy explains what personal data I receive through the Mira website, why I need it, where it is stored, who it is shared with and how you can manage it. It was drawn up under Russian Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (hereinafter, the Law). Consent to data processing is set out in a separate document: Consent to the processing of personal data.

In short:

• data from the inquiry form is needed to reply to you, prepare a proposal and a concept, and, if we come to an agreement, to conclude and perform a contract;
• the inquiry is first recorded on a server in Russia;
• Yandex Metrica and its cookies are enabled only if you clicked “Allow” in the banner;
• you can withdraw your consent at any time by writing to pavel@redesign-new.ru.

1. Who processes the data

The personal data operator is the individual entrepreneur (sole proprietor) Irina Nikolaevna Golubovskaya.

• TIN (INN): 772773985190
• Email for requests: pavel@redesign-new.ru

Below, the operator refers to himself as “I”. I am personally responsible for organizing the processing of personal data.

The policy applies to all personal data I receive through the Mira website and to correspondence about inquiries made through it.

2. Terms

• Personal data — any information that directly or indirectly relates to a specific person: name, phone number, Telegram username, etc.
• Processing — any action with personal data: collection, recording, storage, use, transfer, deletion and others.
• Cookies — small files that a website or a service connected to it saves in the browser in order to recognize the device on later visits.

Other terms are used in the meaning given to them by the Law.

3. What data I process

From the inquiry form

• your name or how you would like to be addressed;
• your phone number or Telegram username;
• the address of your current website or map listing (Yandex Maps), if you provided it;
• the text of the inquiry and the services selected in the form.

Together with the inquiry, the following technical information is saved:

• the date and time of submission, IP address and browser data — to protect the form from spam and to confirm when and from where consent was given;
• the page from which the inquiry was sent and the first page of the visit;
• advertising tags (UTM tags and yclid), if you came from an ad — to understand where inquiries come from.

If it comes to a contract

• surname, first name, patronymic, position and contact details;
• details of the sole proprietor or organization, including bank details;
• email for documents and correspondence about the project.

What the website collects automatically

• Server logs. With every request to the website, the server records the IP address, date and time, page address, referring address and browser data. This is needed for the website to work and to protect it from attacks.
• Cookies and Yandex Metrica data with Session Replay (Webvisor) — only after your consent in the banner. Details are in section 11.

What I do not process

I do not collect special categories of personal data (about health, political views, religious beliefs, nationality, etc.) or biometric data. I do not make decisions that have legal consequences for you based solely on automated processing. I do not disseminate data, that is, I do not disclose it to an indefinite number of persons.

4. Purposes and legal grounds

For each purpose, I process only the data needed for it.

Replying to an inquiry

• Data: from the inquiry form and technical information about it.
• Ground: your consent (clause 1, part 1, article 6 of the Law).

Preparing a proposal and a homepage concept

• Data: from the inquiry form and what you tell me about the task during our discussion.
• Ground: your consent.

Concluding and performing a contract

• Data: from the inquiry form and data for the contract.
• Ground: a contract to which you are a party, or its conclusion at your initiative (clause 5, part 1, article 6 of the Law). If the contract is concluded by a company you represent, your consent. I keep the contract and payment documents because tax and accounting laws require it (clause 2, part 1, article 6 of the Law).

Website analytics

• Data: cookies, Yandex Metrica and Session Replay (Webvisor) data.
• Ground: your consent, which you give with the “Allow” button in the banner.

Website operation and security

• Data: server logs and the IP address used by the form to limit the number of submissions.
• Ground: my legitimate interest: the website must work, and the form must not be flooded with spam (clause 7, part 1, article 6 of the Law). This does not violate your rights: the logs are not used for advertising and are kept for a short time.

5. How I process data

Actions with data: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion and destruction.

Processing is mixed: automated and non-automated, with transfer over the internet.

6. Where data is stored and how it is protected

I record, systematize, accumulate, store, clarify and retrieve the personal data of Russian citizens in databases on a server in Russia (part 5, article 18 of the Law). An inquiry from the website is first recorded on this server and only then sent to the services listed in section 7.

How I protect data:

• the website and the form work only over the secure HTTPS protocol;
• access to the server and services is protected by passwords and access keys;
• only I and the people who help me process inquiries have access to the data, and only to the extent needed for this; they are obliged to keep the data confidential;
• the form is protected from spam and limits the number of submissions from one address.

7. Who I share data with

• Services that help process the inquiry — they are listed below. I share only what is needed to reply to the inquiry. If a service processes data on my instructions, the instruction is formalized by a contract, and the service is obliged to maintain confidentiality and protect the data (part 3, article 6 of the Law).
• Yandex LLC — Yandex Metrica and Session Replay (Webvisor) data, only if you allowed analytics in the banner.
• Government authorities — only when required by law.

I do not sell personal data.

List of services

• Hosting and storage of inquiries — REG.RU Domain Name Registrar LLC, Russia: the website runs on this server, and the inquiry is recorded here first.
• Email for inquiries — Yandex 360, Yandex LLC, Russia: the inquiry reaches me by email so that I can reply to it.
• Notification of a new inquiry — Telegram: only a message about a new inquiry is sent — what is needed and from which page, without the name, contact details or text of the inquiry.
• Yandex Metrica — Yandex LLC, Russia: only if you allowed analytics in the banner.

If the list changes, for example if an inquiry management system (CRM) is connected, I will update the policy before data transfer begins.

Cross-border transfer

Personal data is currently not transferred outside Russia: Telegram receives only a notification without any data from the inquiry. If this changes, the transfer will begin only after the data has been recorded on a server in Russia, after notifying Roskomnadzor (the Russian data protection authority) and on the terms of article 12 of the Law, and the countries will appear in the list above.

8. Retention periods and deletion

• An inquiry that did not lead to a contract: as long as it is needed for replying and discussion, but no longer than one year from the last communication about it.
• Contract data: for the entire term of the contract, and after it, as long as tax and accounting laws require.
• Server logs: no longer than 30 days.
• Yandex Metrica data: in the Metrica service under the rules of Yandex LLC; cookies in your browser — until you delete them or until they expire.

When the purpose of processing has been achieved, the retention period has expired or you have withdrawn your consent, I destroy the data on the server and in the listed services within 30 days, unless there is another lawful ground for keeping it, such as a contract or a legal requirement. I confirm destruction with a document, as required by Roskomnadzor rules.

9. Your rights

You can:

• find out whether I process your data, what data exactly, why, on what ground, where I got it from, who I share it with and how long I keep it;
• demand that the data be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate, obtained unlawfully or not needed for the stated purpose;
• withdraw your consent;
• demand that processing be stopped;
• appeal my actions to Roskomnadzor or in court.

I reply to requests within 10 working days. If more time is needed, the period can be extended by another 5 working days: I will let you know about this before the deadline and explain the reason.

A request for information about your data can be sent as an electronic document signed with an electronic signature to pavel@redesign-new.ru. Under the Law, the request must include the details of an identity document, information confirming that I process your data (for example, the date of the inquiry and the contact you provided in it), and a signature.

10. How to withdraw consent

• Consent for an inquiry: write to pavel@redesign-new.ru “I withdraw my consent to the processing of personal data” and include the contact you left in the inquiry, so that I can find your data.
• Consent to analytics: click “Cookie settings” at the bottom of any page and choose “Necessary only”. Metrica will be turned off, and its cookies on this website will be deleted. You can also simply clear the site data in your browser.

After withdrawal, I stop processing and destroy the data within 30 days, unless I have another lawful ground for keeping it (part 5, article 21 of the Law).

11. Cookies and Yandex Metrica

What the website stores in the browser

• Necessary records: your choice in the banner, the first page of the visit and advertising tags. The choice is kept in browser storage; the entry page and tags are kept only until the end of the session. The tags and entry page reach me only if you submit an inquiry.
• Yandex Metrica analytics cookies. They appear only if you clicked “Allow”. If you choose “Necessary only”, Metrica does not load at all.

What Metrica collects

• an identifier in a cookie that Metrica uses to tell one device from another;
• IP address and approximate location based on it;
• device type, browser, operating system, screen size;
• traffic source: search, ads, a link on another website;
• pages viewed, time on site, button clicks and link clicks;
• with Session Replay (Webvisor), a recording of actions on the page: scrolling, mouse movements, clicks. The inquiry form fields are hidden from recording: Webvisor does not save what you type in them.

Why

To understand which pages are useful, where the website is inconvenient and where inquiries come from. In Metrica, I count goals: submitting an inquiry, going to Telegram and clicking the email address.

Who processes it

Metrica data is processed by Yandex LLC under its own terms of use of the service.

How to opt out

• click “Necessary only” in the banner, and Metrica will not load;
• if you have already clicked “Allow”, click “Cookie settings” at the bottom of any page and choose “Necessary only”;
• delete or block cookies in your browser settings: the website will keep working.

12. Contacts

• Operator: individual entrepreneur (sole proprietor) Irina Nikolaevna Golubovskaya, TIN (INN) 772773985190
• Email for requests: pavel@redesign-new.ru
• Telegram: @ryzhov17

13. Changes to the policy

The current version is always published on this page. If the purposes of processing or the scope of data change, I will update the policy and, if necessary, ask for new consent.

Version of October 27, 2026.